Slavek Kabrda

Closing this PR, I'm doing some more research and I think I'll be able to find a better way to fix this.

Thanks a lot for providing the context! In terms of the options you outlined, I think you're absolutely right that most people aren't TUF experts and we definitely should aim...

Hi, thanks for the feedback! I can certainly try to add this to sigstore-go. I'll leave this PR open and when the sigstore-go work is merged, I'll update it to...

All the PRs for implementing this have been merged. I'm closing this issue - thanks for all the reviews!

Oh, I didn't realize that sigstore-go already has so much related code to this in https://github.com/sigstore/sigstore-go/tree/main/pkg/root, this actually makes so much sense... I don't know why I didn't think of...

Hi :wave: I created https://github.com/sigstore/sigstore-go/pull/247. I have a local modification of this PR that uses the functionality from there and works fine. I'll push it once the sigstore-go PR is...

This PR is conflicting on multiple files and will need a significant rewrite to utilize https://github.com/sigstore/sigstore-go/pull/247 anyway. I think it's going to be easier if I close it and open...